Nessus Vulnerability Scanner Integration

Wider attack surface coverage powered by hundreds of integrations and deeper threat visibility powered by thousands of detections.

Nessus Vulnerability Scanner

Version: Nessus Professional, Tenable Cloud and Security center

Nessus/Tenable Vulnerability scanner is a tool that identifies the vulnerability available/present in our environment.

Netsurion's Open XDR platform can integrate Nessus/Tenable vulnerability scanner that helps you to monitor vulnerabilities detected by the scanner into the Netsurion console. It provides a visual representation of top vulnerabilities detected in the environment, also shows highly vulnerable system which is having a high CVE score. Alerts are triggered whenever any critical or high severity vulnerabilities are detected in the environment. Netsurion's Open XDR platform can generate vulnerability reports on a scheduled basis as well. This report provides information about the system which is highly vulnerable.

On monitoring the Nessus Scanner, the following are the activities that can be monitored.

Security - Vulnerability detection, a system with a high CVE Score.

Once Nessus Vulnerability Scanner is configured to deliver events to Netsurion Manager; alerts, dashboards and reports can be configured into Netsurion.

Alerts

Type	Name	Description
Security	Nessus - Host with high CVE score	This alert will generate whenever the scanner detects the host with CVE score between 6-10.
Security	Nessus - Vulnerability with high risk	This alert will generate whenever any vulnerability is detected with high risk.

Reports

Type	Name	Description
Security	Nessus - Vulnerability Detected	This report will provide information about the vulnerability detected in the environment. It will have information about the system, CVE score, vulnerability detected on it and its risk level. This also provides information about the mitigation of vulnerability detected on the system.
Operations	Nessus - Host dicovery	This report provides the number of alive hosts and active ports on a network.
Compliance	Nessus - MDM config audit	This report provides the Audit scan result configurations of mobile device managers.
Compliance	Nessus - Offline config audit	This report provides the audit configurations of network devices.
Compliance	Nessus - Scap and Oval auditing	This report provides details on SCAP and Oval content audit scan results.

Documentation

The configuration details are consistent with Netsurion version 9.x and later, Nessus Vulnerability Scanner.

Download Integration Guide and How-to Guide for more information and to configuration instructions.